From c2731b0ca0fe8b8331e47452f03228027fa3f7f9 Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <patrick@puiterwijk.org>
Date: Thu, 9 May 2019 15:58:28 +0200
Subject: [PATCH] ipsilon: move saml2 metadata to tempdir

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
---
 roles/ipsilon/templates/configuration.conf | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/roles/ipsilon/templates/configuration.conf b/roles/ipsilon/templates/configuration.conf
index 714017cd80..2e28f65a3a 100644
--- a/roles/ipsilon/templates/configuration.conf
+++ b/roles/ipsilon/templates/configuration.conf
@@ -60,7 +60,11 @@ openid untrusted roots=
 openid enabled extensions=Fedora Teams,Attribute Exchange,CLAs,Simple Registration,API
 
 saml2 idp storage path=/etc/ipsilon/saml2
+{% if inventory_hostname.startswith('os-') %}
+saml2 idp metadata file=/httpdir/metadata.xml
+{% else %}
 saml2 idp metadata file=metadata.xml
+{% endif %}
 {% if env == 'staging' %}
 saml2 idp nameid salt={{ ipsilon_stg_saml2_nameid_salt }}
 {% else %}